CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2024/02/12 12:00 a.m.•8 views

CVE-2024-23759: Unrestricted Upload of File with Dangerous Type

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...

9.8CVSS6.1AI score0.47549EPSS

SaveExploits4References3

Positive Technologies•added 2024/02/12 12:00 a.m.•7 views

PT-2024-20061

Name of the Vulnerable Software and Affected Versions Gambio versions through 4.9.2.0 Description The issue allows attackers to run arbitrary code via the search parameter of the "Parcelshopfinder/AddAddressBookEntry" function. This is due to the deserialization of untrusted data. Recommendations...

9.8CVSS5.9AI score0.47549EPSS

SaveExploits4References8

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by